>Number: 42541
>Category: pkg
>Synopsis: [UPDATE by Maintainer] net/tor 0.2.1.20 -> 0.2.1.21
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: pkg-manager
>State: open
>Class: change-request
>Submitter-Id: net
>Arrival-Date: Tue Dec 29 17:05:00 +0000 2009
>Originator: Christian Sturm
>Release:
>Organization:
>Environment:
>Description:
The attached patch updates net/tor to 0.2.1.21
Since it contains only bufixes (which lead to 'compatibility' with recent
OpenSSL and fix a crash - see changes) it may be wise to think about pulling
the new version over to current stable.
Changes in version 0.2.1.21 - 2009-12-21
o Major bugfixes:
- Work around a security feature in OpenSSL 0.9.8l that prevents our
handshake from working unless we explicitly tell OpenSSL that we
are using SSL renegotiation safely. We are, of course, but OpenSSL
0.9.8l won't work unless we say we are.
- Avoid crashing if the client is trying to upload many bytes and the
circuit gets torn down at the same time, or if the flip side
happens on the exit relay. Bugfix on 0.2.0.1-alpha; fixes bug 1150.
o Minor bugfixes:
- Do not refuse to learn about authority certs and v2 networkstatus
documents that are older than the latest consensus. This bug might
have degraded client bootstrapping. Bugfix on 0.2.0.10-alpha.
Spotted and fixed by xmux.
- Fix a couple of very-hard-to-trigger memory leaks, and one hard-to-
trigger platform-specific option misparsing case found by Coverity
Scan.
- Fix a compilation warning on Fedora 12 by removing an impossible-to-
trigger assert. Fixes bug 1173.
>How-To-Repeat:
>Fix:
begin 644 tor.patch.gz
M'XL("$0Q.DL``W1O<BYP871C:`"]D5U+Y#`4AJ_MK\BE"[9-<DZ;1!Q%5-"+
M\<+9/W"2G`QEEG9)R_CQZ^V`@[.Z<[6P@9`#(<_[/N1*/`]Y4SSTD5_.Q9(V
MG+I?7"S^?15/-RNQ@YV+.FS'/`Q3_7NS'G.H>Y[J:<CU/NYL6V2><L?;KE^+
M/!]C-_1"5:TI8I>2*/-N_JR'`8L+<?NP^OEXO;Q;G)S,M%)6NE*5ED59EL7E
MD5NU5XW=.'5]&OZ3ZC[NJ"H<J(+YK`=G39CWK+NZOU;B]-"TFBA7Z[<?8B%\
M"FTP[$)@UD`^(#L3"#TY2P04C;&H6SUSGI:WJI5'2<1(2%[K1(Y]$Z12H6UT
MC%&!!$!I$EIN:->H>^.C'(U*R\8)_SKQ^/$GWQ34P8-&!2#I("KTSLV!+8`T
M%CQ8+UVRK44*UO',^8O"(2F21DD1T%*@9&U$KX`P(:I&@W8N,8=HFEVCKPKJ
0#P5IG84/A7<<2[1G*P,`````
`
end